LinuxQuestions.org
Visit Jeremy's Blog.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices


Reply
  Search this Thread
Old 06-19-2015, 08:23 AM   #1
punchy71
Member
 
Registered: Dec 2011
Posts: 172

Rep: Reputation: Disabled
I'm comparing security and privacy oriented distros and could use some suggestions


Hello,
I'm currently thinking of installing Tails and BackBox linux in addition to my TriSquel linux install in a "triple boot" or "quadruple boot" fashion on my hard drive. If I do this, what would Tails (which supposedly forces everything go through the 'Tor network' (by default I'm assuming)) and BackBox (which offers security assessment and penetration testing) offer me that TriSquel doesn't?
I think TriSquel offers the ability to connect through the 'Tor network' though I just installed TriSquel and haven't tried it yet so I don't know if it is true or not.
So it may be all I really need is just BackBox for security assessment purposes.
On Wikipedia; BackBox says it's licensed as: "Free software licenses
(mainly GPL)". And Wikipedia also says that Tails is licensed as: "License GPLv3+". So I'm assuming that both of these distros have proprietary software elements installed with them since neither distro is listed on the GNU.org website as being endorsed by them.
Previously, I was also considering Kali linux but it said one of its focus's was "digital forensics" and that sounds like trying to solve a mystery after the crime (which I don't really forsee myself needing). Also, on Wikipedia its license is listed as: "various", which sounds kind of suspect to me in the first place. This made me lean towards BackBox for my security assessment distro of choice.
I also have an eye on the new "GNU GuixSD" as a possible addition to my multiple boot laptop, but it's still in Alpha development state right now, so it's not quite ready yet and I'm not entirely sure what it will do that TriSquel doesn't do (both distro's are endorsed by the GNU project which is sponsored by the Free Software Foundation which appeals to me).
Thank you for any help
 
Old 06-20-2015, 02:43 AM   #2
jamison20000e
Senior Member
 
Registered: Nov 2005
Location: ...uncanny valley... infinity\1975; (randomly born:) Milwaukee, WI, US( + travel,) Earth&Mars (I wish,) END BORDER$!◣◢┌∩┐ Fe26-E,e...
Distribution: any GPL that work on freest-HW; has been KDE, CLI, Novena-SBC but open.. http://goo.gl/NqgqJx &c ;-)
Posts: 4,888
Blog Entries: 2

Rep: Reputation: 1567Reputation: 1567Reputation: 1567Reputation: 1567Reputation: 1567Reputation: 1567Reputation: 1567Reputation: 1567Reputation: 1567Reputation: 1567Reputation: 1567
Hi.

Free to try but more security tools can mean more security risks like in the case of pen-testing distros (example Kali.)

A more secure Linux can be any distro (heck even winblows ) but that's more up to the user and "their" software mantenerse plus updates, level of paranoia &c... I haven't used BlackBox for sometime now. Are you OK at a command prompt and Googling? Tails and Blag are cool too however I tend to stick with a minimalistic base like a netinst, Arch or Slackware (just more examples, ) then build up my bloatware from there.

Best wishes and have fun!

Last edited by jamison20000e; 06-20-2015 at 02:52 AM.
 
Old 06-20-2015, 05:16 AM   #3
fatmac
LQ Guru
 
Registered: Sep 2011
Location: Upper Hale, Surrey/Hants Border, UK
Distribution: Mainly Devuan, antiX, & Void, with Tiny Core, Fatdog, & BSD thrown in.
Posts: 5,487

Rep: Reputation: Disabled
Tails is meant to be run from a pendrive, that being one of its security measures.

Most Linux distros will have security software in its repos, you just need to decide what you want & install it.

The less software in a distro, the more secure it is, as there are less opportunities to compromise a system, having said that, crackers mostly have to gain root to do damage. So don't get paranoid about it.
 
Old 06-20-2015, 01:43 PM   #4
John VV
LQ Muse
 
Registered: Aug 2005
Location: A2 area Mi.
Posts: 17,624

Rep: Reputation: 2651Reputation: 2651Reputation: 2651Reputation: 2651Reputation: 2651Reputation: 2651Reputation: 2651Reputation: 2651Reputation: 2651Reputation: 2651Reputation: 2651
"some suggestions"

one word

OppSec

during ww2 the SAME message was resent using the same enigma setting
a BIG OOPS

visiting FB using tor ?
loging into your mail ?

installing almost any plugin in any browser
QOS built into a program ( any program!!! )

many things will give you away
and if you NEED to hide from LEO's then - one oops and you are in jail


but if all you want is not to be tracked

there are some Amish communities
and deserted atolls
 
Old 06-20-2015, 01:50 PM   #5
273
LQ Addict
 
Registered: Dec 2011
Location: UK
Distribution: Debian Sid AMD64, Raspbian Wheezy, various VMs
Posts: 7,680

Rep: Reputation: 2373Reputation: 2373Reputation: 2373Reputation: 2373Reputation: 2373Reputation: 2373Reputation: 2373Reputation: 2373Reputation: 2373Reputation: 2373Reputation: 2373
To add to the above -- don't bother with TOR unless you are a freedom fighter under an oppressive government. If you're in most "Western" countries then law enforcement will conclude that you are a terrorist and/or a paedophile if you use TOR so you have to be very, very, careful what you do and even deleting your internet history can be a criminal offence.
If you don't want to be tracked then use browser settings and the like to disallow or remove cookies and scripts and pay more attention to that kind of thing. If you want to be safer backing then, perhaps, use a live distribution just for that banking transaction and nothing else.
"secure distributions" are all well and good but they make you a suspected criminal in most countries and, as the post above points out, don't offer much help if you use the internet "normally" anyhow.

Edit, links regarding deleting history:
https://www.techdirt.com/articles/20...s-felony.shtml

http://www.huffingtonpost.com/2015/0...n_7526550.html

Last edited by 273; 06-20-2015 at 01:53 PM. Reason: Some links to confirm my assertions.
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
[SOLVED] Age and Culture Oriented Linux Distros LinuxNoobX Linux - Newbie 7 02-12-2012 11:00 AM
Announcing nFlux Linux; a Fluxbox oriented trinity of distros! linus72 Linux - General 304 02-01-2011 04:10 PM
Comparing Distros confused_bof Linux - Distributions 5 05-17-2006 07:05 PM
comparing bootable rescue distros poiuytrewq Linux - Distributions 2 06-01-2005 08:00 PM
Comparing distros dpeirce Linux - General 17 01-26-2005 11:08 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Security

All times are GMT -5. The time now is 08:01 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration